$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: 0NDU1R+FMqIUYfKVEGqfQ39vl8ZskNF0O9EMaIv7KTw= Subject key identifier: A0:09:11:DA:CD:61:37:B1:28:FD:CB:AA:FE:F1:DC:72:1B:B5:B8:3E Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 05CB Signing time: Thu 08 May 2025 22:52:29 +0000 Manifest this update: Thu 08 May 2025 22:52:28 +0000 Manifest next update: Thu 15 May 2025 22:52:28 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: Ri61VNiq2R4AH1Jiww00TQ8PIvYKQ87h2+tlsnj3sIM=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: May 8 22:52:28 2025 GMT Not After : May 15 22:52:28 2025 GMT Subject: CN=681d35ad-f4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:c4:45:e5:ab:cb:32:46:d0:6d:f6:8e:f8: 0b:c4:53:98:61:ce:75:c4:33:31:9e:03:42:59:f5: 9b:49:15:16:2a:b9:02:23:c9:f8:4b:2e:95:3d:b3: 6a:6e:b5:de:9d:18:2c:be:ed:15:63:d1:6d:42:1e: ba:9e:12:8d:47:90:b7:88:b3:48:15:d5:ec:f0:7b: 62:3a:cf:d0:ad:ad:bc:67:44:2c:a1:74:19:8b:60: ac:35:de:f7:79:1e:0d:1a:a1:58:e2:1e:f2:3d:b7: 25:b7:b4:b1:26:db:c8:66:6f:39:2e:3c:27:82:51: 84:2a:0f:a9:9c:20:ab:22:3b:82:06:79:86:b0:01: b6:cd:5e:8f:30:14:76:c5:b0:ba:f2:76:99:07:d4: 1a:9e:2a:96:0b:37:ac:f6:09:bc:91:1e:76:d5:fd: f8:67:7d:c7:fa:51:3e:c4:43:3f:b7:42:21:92:e4: de:a0:c1:f6:2f:e9:b3:7a:07:a5:9a:c4:a3:ae:7d: dd:76:b0:54:ba:0f:8d:7a:de:f6:d0:ab:45:cd:da: 5e:bf:db:71:2f:f9:70:f0:f3:cd:60:97:ca:94:ca: c0:cb:d1:69:8c:6f:bb:55:f4:d3:ef:d0:79:ad:3d: 92:82:d0:7c:ec:bb:eb:56:0b:c2:0c:a9:b3:ab:47: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:09:11:DA:CD:61:37:B1:28:FD:CB:AA:FE:F1:DC:72:1B:B5:B8:3E X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b2:c8:27:c7:da:ff:df:d1:9d:82:43:88:60:8f:a0:a2:cb: 59:72:90:f1:9a:c4:5f:e2:28:95:6a:81:43:1a:cd:17:1b:08: 5e:f3:32:c5:ec:df:7e:eb:e4:16:a7:1e:8b:27:56:1b:46:4d: ac:da:c7:ef:5a:56:41:c9:ae:2d:12:5f:78:80:8f:e6:e4:30: 8b:7f:6b:60:10:27:a1:bd:e2:95:09:ca:65:bd:fe:a0:32:6e: cb:1e:c1:dc:d1:ef:3e:3f:7c:21:54:93:8a:39:1a:80:5e:03: 6b:c3:28:ae:6c:64:0b:92:39:99:a7:3c:c4:76:a7:13:f9:db: 87:b2:ac:a4:2d:23:25:9f:cb:6b:8d:8c:b7:65:ae:f4:32:3f: 60:da:94:03:02:c5:96:2a:ef:39:d7:bb:5d:fd:b3:b9:7d:d7: e3:45:7b:91:a2:3f:c8:ac:76:f7:1d:30:18:ac:ea:46:fb:4a: 7f:24:74:75:55:7a:2a:73:d7:9b:dd:0b:42:04:6c:5c:e4:fd: c7:fa:80:c7:34:a2:f1:97:b5:b4:d0:11:3d:bf:87:ef:a3:ef: 2f:5e:9e:30:05:c6:6d:4d:c4:8a:92:6d:07:0d:6f:89:58:00: 6a:dc:3e:2a:49:de:58:35:7c:09:b7:a6:2c:17:25:83:73:24: 08:9f:3d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUwNTA4MjI1MjI4WhcNMjUwNTE1MjI1MjI4WjAYMRYwFAYD VQQDEw02ODFkMzVhZC1mNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2TEReWryzJG0G32jvgLxFOYYc51xDMxngNCWfWbSRUWKrkCI8n4Sy6VPbNq brXenRgsvu0VY9FtQh66nhKNR5C3iLNIFdXs8HtiOs/Qra28Z0QsoXQZi2CsNd73 eR4NGqFY4h7yPbclt7SxJtvIZm85LjwnglGEKg+pnCCrIjuCBnmGsAG2zV6PMBR2 xbC68naZB9QaniqWCzes9gm8kR521f34Z33H+lE+xEM/t0IhkuTeoMH2L+mzegel msSjrn3ddrBUug+Net720KtFzdpev9txL/lw8PPNYJfKlMrAy9FpjG+7VfTT79B5 rT2SgtB87LvrVgvCDKmzq0fr/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAJEdrN YTexKP3Lqv7x3HIbtbg+MB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCassgnx9r/39GdgkOIYI+gostZcpDxmsRf4iiVaoFDGs0XGwhe8zLF 7N9+6+QWpx6LJ1YbRk2s2sfvWlZBya4tEl94gI/m5DCLf2tgECehveKVCcplvf6g Mm7LHsHc0e8+P3whVJOKORqAXgNrwyiubGQLkjmZpzzEdqcT+duHsqykLSMln8tr jYy3Za70Mj9g2pQDAsWWKu8517td/bO5fdfjRXuRoj/IrHb3HTAYrOpG+0p/JHR1 VXoqc9eb3QtCBGxc5P3H+oDHNKLxl7W00BE9v4fvo+8vXp4wBcZtTcSKkm0HDW+J WABq3D4qSd5YNXwJt6YsFyWDcyQInz0g -----END CERTIFICATE-----Generated at Fri May 9 18:46:18 2025 by rpki-client